rrafluap

Hi, We are ironing out a few issues with BYOD and mobile phones connected to our WiFi network. We use Smoothwall and although everything works fine (phones are connected and filtered correctly) there's an exclamation mark next to the WiFi symbol and the phone states 'Connected without internet' in the WiFi settings. Users are always reporting it as an issue although haven't gone as far to check. This also happens with Chrome. I thought it was to do with Captive Portal check URLs so have added the ones I see to our exception list. This hasn't made a difference. The URLs don't get filtered or require authorisation. Here are the various URLs I added to the exception lists: apple.com/library/test/success.html clients3.google.com/generate_204 connectivitycheck.android.com/generate_204 connectivitycheck.gstatic.com/generate_204 detectportal.firefox.com/success.txt google.com/gen_204 gstatic.com/generate_204 msftncsi.com/ncsi.txt play.googleapis.com/generate_204 Does anyone know how the Android system determines whether there is internet connectivity? Thanks, Paul

Worked it out! The main issue was the /q flag. It needed to be /qn so that it wasn't expecting the user to see an interface. Once that happened, it actually started failing rather than timing out. Once I disabled the MSI Restart Manager it was fine. The most important parts are highlighted in bold. Hope this helps someone! msiexec /i "sw-safeguarding-client-2.8.0.msi" /norestart MSIRESTARTMANAGERCONTROL="Disable" OrgID= SerialID= /qn /L*V "C:\smoothwallmonitor.log"

Hey, Am having trouble deploying Smoothwall Monitor using SCCM. We had our install last week and everything was deployed fine to all devices (apart from an immediate, unnotified restart). However, when deploying the same msi, on an OSD, it times out after several hours and fails the task sequence. I've taken a screenshot of the errors in the logs but not sure what it is. It says on the DCM log about waiting for reboot etc but with /norestart or REBOOT=ReallySuppress it doesn't make a difference. CMD line I'm using: msiexec /i "sw-safeguarding-client-2.8.0.msi" OrgID= SerialID= /q /L*V "C:\smoothwallmonitor.log" Hoping someone has come across this issue and can shed some light on it. Thanks

SOLUS was absolutely useless for the Spring release so have had to resort to doing it manually till I have the time to work out the issue. Thanks so much for the suggestions, will give them a go in the morning.

Hi, I'm having issues deploying SIMS via a script on SCCM (full system deployment -Windows 10) but SIMSInfrustructureSetup.exe keeps timing the script out. The trouble with the SCCM deployment is that it doesn't show any popups/errors etc... If I run the script manually as local admin, it works fine?! What exactly does the SIMSInfrustructureSetup.exe installer actually install so I can just leave it out? Or does anyone know if I'm using the wrong syntax: SIMSInfrustructureSetup.exe /s {QuietMode} {SIMSWorkstation} Appreciate any help. Thanks, Paul

Not a problem. Downloaded, thank you!

Hi, It was the ActiView driver files in an MSI I was after. I have the board ones but need to script the install of the visualiser drivers. Thanks.

Hey, Apologies for dragging up a very old thread but is it possible to get a copy of this at all, please? Thanks, Paul

There's nothing that suggests its the GP settings. Have also come across someone else with a similar issue but never came up with a permanent fix unfortunately. (https://techcommunity.microsoft.com/t5/windows-servicing/january-2022-quality-update-breaks-passing-domain-credentials/m-p/3129892#M1458) Seems its down to the details not being stored in the credential manager correctly?! I'm not sure the workaround will work for us as our users are forced to change their passwords fairly regularly and will be really reluctant to be messing with the Credential Manager.

So I tried a few things over the weekend, connecting with it on both 0 and 1, no luck. Also, set up a temp 2022 server and tried that, exactly the same issue. I'm going to trawl through the GP settings to see if a recent policy definition update was to blame?!

Connecting with the IP instead doesn't change anything and also UseRasCredentials was set to 1 but didn't make a difference when trying to connect with it either way.

Uninstalling the update didn't fix the issue (I'm running 21H2 so its KB5003791).

I'll try it in the morning and report back, thanks!

I did think that but again, unless I'm not searching the correct thing, I can't find anyone else with the same issue. We didn't experience that specific issue but that's not to say that it isn't?

Hi, We are using RRAS for our dial-in VPN service (L2TP- with PSK) and all of a sudden, users are unable to access file shares using their domain credentials. What used to happen is they'd connect to the VPN, a VBS script would run to map drives and printers. As the VPN had logged them in using their domain credentials, there was no need to specify any credentials for home drives etc in the scripts. Now however, they are logged in... (I can ping the DC), the script says the password was incorrect. If I try and access the share manually via windows explorer, I receive: 0x80004005 unspecified error. But manually mapping the drive with credentials will work... The only thing that I can find is in the domain controller security event log (the RRAS server's entries look fine) screenshots are attached. Perhaps I'm not searching online for the correct keywords but I can't seem to find anything that will help. As you can see, the dial-in computer's user credentials are being used to attempt authentication (not domain) with the domain controller having just been authenticated by the RRAS server using them??? Any help is appreciated by me and lots of frustrated teachers Thanks, Paul

Hi, We have Windows machines (currently 7 - soon to be 10) on a domain that I'd like to have a solution that helps the children either login with a SSO or at least auto complete their email addresses in chrome. They can remember their windows usernames and passwords but often find it hard when signing in to G Suite to remember their email addresses. They're pupil.@. - They always miss some part out or get something wrong. Either windows could authenticate them and automatically have them logged in or even if I could via gpo/reg/cmd add an autocomplete to chrome to atleast suggest their individual email addresses? Does anyone have any suggestions? I think the hardest part is that it needs to be a free solution. Hope this makes sense. Thanks.

That's my thinking too. I've checked the apps that we allow/force install and there's only 5 (ish) per pupil and are all less than 1MB each. I've also disabled Google Drive Syncing for Chrome devices. In the past we were advised to disable the [Clear cached profile on logoff] (words to that effect) options as there was a bug. We have since turned it off so it isnt deleting them anymore. Although they dont use the same computers each lesson, I would say they are roughly the same. How can I see if its discarding or reusing the profiles? I'm sure theres a bandwidth usage per IP report on Smoothwall so will use that and also filter by IP also and let you know.

It does seem so. I just dont understand whats going on to make it that high. As i've said, it seems to be when they are logging on rather than their actual web activity? We've had a bit more use today compared to most as the Chromebooks have been used throughout the day.

The ActivSoftware is where it checks for a newer version, offers it to the users on startup and they are clicking yes to download it and never actually using it. Im going to roll out a newer version soon which disables the auto update check. Our connections are 20/20 but burstable up to 80 (we regularly get just under 70) and have two of those connections.

Here's our bandwidth usage for Wednesday. Numbers 1 and 3 aren't normally on there but there must have been an iOS update and I also added some categories to our WSUS server so that explains the Microsoft ones.

Yes I can, I'll re-run that report tomorrow.

I did have this on but didn't seem to make a difference. Will pop it back on after all the changes I've made and try it again.

I've now scattered the updates and hasn't changed anything. One of our highest hit URLs is play.google.com, I'm presuming that it's for apps/app updates on the chrome devices but is normal to have so many on just 30 chrome devices used for 2 hours?

I'd have to check the version but we aren't seeing anywhere near that amount of hits. Out of curiosity, if you guys wanted to know the purpose of a URL, where would you go to search it? Basically there's a couple of Google ones and a search comes up with nothing but there might be a site that has a database of them and their functions?

My assumption would be that it's not the updates as our Smoothwall would cache it and already had the phones have high priority but didnt do anything. The updates were scattered over a day but have now changed that to 7 instead.